Update win_vul_cve_2020_0688.yml

2020-10-15 15:56:36 -03:00
parent ef3af551e9
commit 1cd56f5dae
1 changed files with 2 additions and 2 deletions
@@ -17,8 +17,8 @@ detection:
        EventID: 4
        Source: MSExchange Control Panel
        Level: Error
-    selection2:
-        - '*&__VIEWSTATE=*'
+    selection2|contains:
+        - '&__VIEWSTATE='
    condition: selection1 and selection2
 falsepositives:
    - Unknown